Quttera ThreatSign – Web Malware Scanner for WordPress Security & Risk Analysis

The quttera-web-malware-scanner plugin exhibits a concerning security posture, primarily due to its substantial attack surface lacking proper authentication. With 31 unprotected AJAX handlers, a vast majority of its entry points are exposed, making it a prime target for unauthorized access and execution of arbitrary actions. The presence of dangerous functions like 'unserialize' and 'exec' further exacerbates this risk, as they can be exploited to execute malicious code if untrusted input is processed. While the plugin has a history of medium and low severity vulnerabilities, including SSRF, sensitive information exposure, and path traversal, the absence of currently unpatched CVEs is a positive sign. However, the taint analysis revealing two flows with unsanitized paths is a critical concern, suggesting potential for directory traversal or similar exploits even with the historical vulnerabilities addressed.